Security vulnerability httpoxy

constella · Jul 18, 2016

Hi,

Do you know if the last WHM server is vulnerable with the httpoxy set of vulnerability?

CVE-2016-5385: PHP

CVE-2016-5386: Go

CVE-2016-5387: Apache HTTP Server

CVE-2016-5388: Apache Tomcat

CVE-2016-1000109: HHVM

CVE-2016-1000110: Python

grayloon · Jul 19, 2016

We have a nice, new vulnerability website to check out.

Should we use Apache's recommended solution on our WHM servers?
Code:
The two lines below enabled in the httpd.conf file will remove the "Proxy:"
header from all incoming requests, before further processing;
    LoadModule headers_module {path-to}/mod_headers.so
    RequestHeader unset Proxy early

cPanelMichael · Jul 19, 2016

Hello,

The following document was published to address questions about HTTPOXY, including steps you can take to determine if your system is affected, and steps for manual mitigation:

CVE-2016-5387 HTTPOXY - cPanel Knowledge Base - cPanel Documentation

Thank you.

Forums

The Community Forums

Interact with an entire community of cPanel & WHM users!

Security vulnerability httpoxy

constella Registered

grayloon Well-Known Member

cPanelMichael Forums Analyst
Staff Member

SOLVED Critical Exim Security Vulnerability

Cloudflare Security Vulnerability

PHP-FPM & Mod Security

security advisor kernel update version issue

cPanel's implementation of Mod_Security

Share This Page

Useful Searches

The Community Forums

Interact with an entire community of cPanel & WHM users!

Security vulnerability httpoxy

constella Registered

grayloon Well-Known Member

cPanelMichael Forums Analyst Staff Member

SOLVED Critical Exim Security Vulnerability

Cloudflare Security Vulnerability

PHP-FPM & Mod Security

security advisor kernel update version issue

cPanel's implementation of Mod_Security

Share This Page

cPanelMichael Forums Analyst
Staff Member